MongoDB warns admins to patch severe vulnerability immediately

MongoDB warned administrators of CVE-2025-14847, a high-severity memory-read vulnerability in the Server's zlib implementation that may allow unauthenticated remote attackers to obtain uninitialized heap memory and — according to its CWE-130 classification — could in some cases enable arbitrary code execution; affected MongoDB and MongoDB Server versions span many widely used releases, and operators are urged to upgrade to specific fixed versions immediately or disable zlib compression as a temporary mitigation.